VCP-CMA 2024 Question 51
Select 3An administrator is configuring identity sources in VMware Aria Automation to allow users from the organization's Active Directory (AD) to log in. The organization requires that users authenticate via an external identity provider (IdP) using SAML 2.0 instead of directly connecting to the AD. What steps are necessary to correctly configure the identity source?
- A
Set up an Active Directory identity source in VMware Aria Automation and configure the domain settings.
- B
Configure a SAML 2.0 identity provider within VMware Aria Automation under Identity Sources.
- C
Ensure the external identity provider supports SAML 2.0 and is configured to communicate with VMware Aria Automation.
- D
Map groups and roles from the SAML 2.0 identity provider to VMware Aria Automation roles.
- E
Enable LDAP integration to synchronize users and groups between Active Directory and VMware Aria Automation.
Show answer and explanation
Correct answers: B, C, D
Explanation
To configure an identity source using an external identity provider with SAML 2.0 in VMware Aria Automation, the administrator must configure SAML 2.0 as an identity source, ensure the external IdP is properly set up to communicate with VMware Aria Automation, and map roles from the IdP to VMware Aria Automation. Direct Active Directory or LDAP integration is not required in this scenario since authentication is handled via the external IdP.
- A. Incorrect.
This is incorrect because directly setting up an Active Directory identity source is not required when using a SAML 2.0 external identity provider. SAML-based authentication bypasses direct AD integration.
- B. Correct.
This is correct because VMware Aria Automation supports SAML 2.0 as an external identity provider, and it must be configured under Identity Sources to authenticate users via the external IdP.
- C. Correct.
This is correct because the external identity provider must support SAML 2.0 and must be properly configured to communicate with VMware Aria Automation to enable authentication.
- D. Correct.
This is correct because roles and groups from the external identity provider need to be mapped to VMware Aria Automation roles to grant appropriate access permissions.
- E. Incorrect.
This is incorrect because LDAP integration is not necessary when using SAML 2.0 for authentication. LDAP is used for direct synchronization with Active Directory but is not relevant here.